6f42a0a4f4c44c32c274c2383096d515[.]zip | Triage

Sharing

General

Target

6f42a0a4f4c44c32c274c2383096d515.zip
Size

729KB
MD5

8cf9ecbe3be3de9d2a95945f74d2bdb9
SHA1

6fa523d8e491cc8738dfd931775e0f621678d3a4
SHA256

91506ce6b6052875242687efede3b7014aad246956525a2a89cb58b882df070b
SHA512

abc3fc4e028c8c5b615d4435b8a5c0671db30d6487da207f1c07b6c5a5306ebb15bed21b3e6f0e8876ff5023116261ae7c7f90ee9a9a2623be1ec85fbf9effdb
SSDEEP

12288:qSfs1YSjhor4Mz5XdlIfQ3OKNeNQMt0milTHrbZzDKI3+QppuLNzLamMOcY5RjPi:qS+YSc3mSNeXolTHZz+t3gOHRjPYmzg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/50acb0d9a9bc6cbca94b77ff490d5aff20c453b24c1fdd498a38a0878755d0bd

Files

6f42a0a4f4c44c32c274c2383096d515.zip
.zip

Password: infected
50acb0d9a9bc6cbca94b77ff490d5aff20c453b24c1fdd498a38a0878755d0bd
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ